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Abstract —We consider a Gaussian multiple access channel 
with K transmitters, a (intended) receiver and an external 
eavesdropper. The transmitters wish to reliably communicate 
with the receiver while concealing their messages from the 
eavesdropper. This scenario has heen Investigated in prior works 
using two different coding techniques; the random l.l.d. Gaussian 
coding and the signal alignment coding. Although, the latter 
offers promising results in a very high SNR regime, extending 
these results to the finite SNR regime is a challenging task. In 
this paper, we propose a new lattice alignment scheme based 
on the compute-and-forward framework which works at any 
finite SNR. We show that our achievable secure sum rate scales 
with log(SNR) and hence, in most SNR regimes, our scheme 
outperforms the random coding scheme in which the secure 
sum rate does not grow with power. Furthermore, we show that 
our result matches the prior work in the Infinite SNR regime. 
Additionally, we analyze our result numerically. 

I. Introduction 

Gaussian Multiple Access Channel (MAC) has been con¬ 
sidered under different security scenarios. One interesting sce¬ 
nario is the AT-user Gaussian MAC with an external eavesdrop¬ 
per in which the users wish to reliably send their messages to 
the receiver while keeping them hidden from the eavesdropper. 
This scenario has been investigated in m using the Gaussian 
i.i.d. random codes. Although, these codes achieve the capacity 
region of MAC without security, the result in ||T1 shows that 
they have a poor performance in relatively high SNR regimes 
when the security constraint is added. In an attempt to improve 
the high SNR results, researchers investigated the problem 
using the signal alignment technique. In particular, in ||2] and 
a, it is shown that their proposed schemes offer a significant 
improvement over the random coding counterpart in a very 
high SNR regime. In fact, the scheme proposed in 0 achieves 
the optimal secure Degrees of Freedom (DoF) of the K- 
user Gaussian wiretap MAC. However, as these alignment 
schemes use a maximum-likelihood decoder, bounding the 
error probability of the decoder in the finite SNR regime 
is challenging and this limits their results to the high SNR 
regime. 

In light of lattice alignment technique, the compute-and- 
forward framework was proposed in IH which can operate at 
any finite SNR. Recently, the AT-user Gaussian MAC without 
security constraint has been investigated in 0 based on 
lattice coding and the compute-and-forward framework. The 
proposed scheme in 0 achieves the MAC sum capacity within 
a constant gap and for any finite SNR. 

Motivated by the above arguments, we propose a new 
achievability scheme for the AT-user Gaussian wiretap MAC 
in which lattice alignment is used along with the asymmet¬ 
ric compute-and-forward framework. We evaluate the perfor¬ 


mance of our proposed scheme both analytically and numeri¬ 
cally for any finite SNR. We prove that our proposed scheme 
achieves a secure sum rate that scales with log(SNR), in 
contrast to the Gaussian random coding result which does not 
grow with SNR and therefore, it somehow fails at moderate 
and high SNR regimes. Finally, we show that the asymptotic 
behavior of our proposed scheme agrees with the prior work 
result in 0 in the high SNR regime. 

The paper is organized as follows. In Section II, our setup 
preliminaries are described. Our main result is given in Section 
III along with the comparison to the prior works. In Section 
IV, the proof of the main result is presented. We conclude the 
paper in Section V. The proof of Lemma 1 used in Section IV 
is given in Appendix. 

II. Problem Statement 

A AT-user (real) Gaussian wiretap multiple access channel 
(MAC) consists of AT transmitters, a receiver and an external 
eavesdropper. The relations between the channel inputs and 
outputs are given as 

K K 

y = X = X (1) 

e=i i=i 

where is an 7V-length channel input vector of user i which 
satisfies the following power constraint. 

||x^f<iVP, Vfe iT} (2) 

The vectors y and in ([T]i are the receiver and the eaves¬ 
dropper channel outputs, respectively. Also, z and z^; are the 
independent channel noises, each distributed i.i.d. according 
to A/'(0,1). Finally, vectors h = [/ii,...,and g = 
[pi,...,are real-valued vectors representing the channel 
gains to the receiver and the eavesdropper, respectively. The 
channel model is illustrated in Fig. 1. 

User I encodes its confidential message Wi, which is 
uniformly distributed over the set {1,..., and is in¬ 

dependent of other users’ messages, through some stochastic 
mapping Eg,, i.e., = Eg{Wii), for I £ AT}. There 

is also a decoder D at the receiver side which estimates the 
messages, i.e., D(y) = 

Definition 1 (Achievable secure sum rate): For the 

described channel model, a secure sum rate 
achievable, if for any e > 0 and large enough N, there exist 
a sequence of encoders {Eg}i^^ and a decoder D such that 

<e (3) 

K 1 ~ 

Y,Rg<-H{WuW2,...,WK\yE) + e (4) 
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Wi 


Wi 
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Fig. 1; The asymmetric Gaussian wiretap multiple access channel 

model. 

where Pr denotes the probability of the eventQ The secure 
sum capacity is the supremum of all achievable secure sum 
rates. 

III. Main Results 

The problem described in Section [II] has been treated 
in m and a in the infinite SNR regime. Their proposed 
schemes is based on bounding the minimum distance between 
the codewords in the receiver’s effective codebook. Using 
this method, they showed that the decoding error probability 
tends to zero, provided that the input power goes to infinity. 
In this paper, we present a new scheme which provides a 
lower bound on the secure sum capacity for the same model 
and for any finite value of SNR. To this end, we utilize 
the compute-and-forward framework presented in a. More 
precisely, we develop a coding scheme using an asymmetric 
compute-and-forward framework to address the asymmetric 
transmitter-eavesdropper channel gains, i.e., different values of 
gi for different users. It should be noted that the asymmetric 
compute-and-forward framework is also treated in 16], but here 
we add the security constraint to the framework. 

In the compute-and-forward framework, the receiver first 
decodes K linearly independent integer combinations of the 
transmitted lattice codewords and then, it solves the equations 
for its desired lattice codewords 0 The equations are decoded 
successively meaning that at each step k, the receiver cancels 
the effect of the k—1 previously decoded codewords from the 
current equation and solves it for the next codeword. The ap¬ 
proach is similar to the Gaussian elimination with a difference 
that row switching is not allowed here. This limitation is due to 
the fact that a codeword cannot be eliminated from the current 
equation using another equation which has not been decoded 
yet. As a result, the order of canceling out the codewords 
cannot be chosen arbitrarily, however, it can be shown that 
there exists at least one successive cancellation order such 
that all K codewords can be decoded 0. 

Proposition 1: Consider an index permutation function tt, 
i.e., TT : {l,...,Ar} —>■ {1,..., K}, which gives a successive 

'Note that in Definition 1 we are interested in weak secrecy. 

^The rates are determined by how closely the equations integer coefficients 
match the channel gains h^. 


cancellation order in the compute-and-forward framework. 
Also, assume that the set of linearly independent integer¬ 
valued AT-length vectors {ai,..., a^} be the equations coef¬ 
ficients. Then, for the channel model in Section|n] the receiver 
can decode the message Wi G 2^^^} with a vanishing 

error probability if 

— ^comb,TT{£) max log ^ II jp ^ [j^^ 


where the matrix F is given as 
F = (pIifxA+hh'^)“xdiag 



The notation diag(v) stands for the diagonal matrix built from 
the vector v and SNR^ > 0 is the power used at encoder £ to 
generate its codewords. Notice that as long as the generated 
codewords are scaled properly before transmission, they would 
satisfy the channel input power constraint]! 

Proposition 1 is immediately deduced from applying Theo¬ 
rem 2 along with Theorem 5 in 0 with an exception that, 
here, users operate at different powers. All other conditions 
stated in Theorem 5 in 0 still apply in Proposition 1. 

In the following, we present a lower bound on the secure 
sum capacity achieved by the proposed scheme. 

Theorem 1: A rate tuple (i?i,..., Rk) offers an achievable 
secure sum rate for the channel model described in Section HU 
if they satisfy the following constraints. 

Ri >0, Re < Rcomb,Tr{e) Vf G {1,..., AT} (6) 


K 

^ ^ max Rsam (7) 


where 

i?sum = ( Yl ^-omb,k - ^ log f ) (8) 

\fc=2 5',r-i(l) // 

The maximum in (|7]) is taken over all the possible successive 
cancellation orders tt and the notation 7r“^(.) simply denotes 
the inverse permutation operator. 

Proof of Theorem 1 is given in Section IIVI 


Comparison to the prior works 

The AT-user Gaussian wiretap MAC has been investigated 
in 0 by means of i.i.d. Gaussian random coding. According 
to 0, for the considered channel model, the following secure 


sum rate is achievable 

K 

Ri < max 
e=i 


1 


■log 


l + l|hfP 

l + l|gPF 


(9) 


Note that the right hand side of expression (|9]) does not 
scale with power P or in other words, the asymptotic behavior 
of dUl tends to a constant rate for a fixed number of users 
and a given set of channel gains. In contrast, our achievable 
secure sum rate in scales logarithmic with P. To prove 
this, we only need to show that the first term in ® grows 
with log(P) as the second term is constant with respect to 


^The scaling factors can be absorbed into the the channel gains. 




















the power. Without loss of generality, let us assume SNR^ = 
atP, V i and some ai > 0 (Note that according to the earlier 
discussion in Proposition 1, > 1 is allowed). Then we have, 


K 




comb.k 


K 


> I log(P) + i ^ log(a,) - 1 log(i^^|det(F)p) 


K 


= V log(-P) + T E log(«fc) - W (log(-^) 


■ log(l 


= \ log(l + 


2 ^ 

r^) - 

^ k^l 

.fP)-I log(iT) 


log(P)) 


( 10 ) 


where inequality (a) is deduced from Theorem 4 in Q- Now, 
we exploit Theorem 12 in 0 in which it is shown that 
Rcomb,k < 4 log(-P) + c, V k, where the inequality 

holds for any (5 > 0 and some c constant with respect to P. 
Therefore, if we take i5 —0 and ignore the constant terms 
in ([T0|, we have Ylk =2 Rcomb,k oc log(^’)- As a result, 

the secure sum rate in ® grows with log(P). 

The numerical results are given in Fig. 2 which are evaluated 
for the three-user channel and random i.i.d. (real) Gaussian 
channel gains. It can be seen that for the moderate and high 
SNR regimes, our proposed scheme outperforms the random 
coding result presented in 0. Notice that the achievable non- 
secure results are shown in the figure as well which can be 
considered as an upper bound on the secure sum rate. 

Another interesting observation occurs when the channel to 
the legitimate receiver is degraded with respect to the channel 
to the eavesdropper. For the Gaussian setting and the same 
noise power, this corresponds to the case l|h|| < llsll- In 
this case, according to the expression in random coding 
fails to achieve a positive secure sum rate, while our scheme 
achieves a strictly positive secure sum rate as long as the ratios 
^ are not rationaln To illustrate this observation, we ran an 
experiment on a two-user Gaussian wiretap MAC with a fixed 
power (at SNR= 25dB) in which the channel gains are given 


as 


.1 T 


h= 1,V2 , g= •\/3cos(0), •\/3sin(0) 


( 11 ) 


for some random 9 uniformly distributed over [0, 27r]. This is 
an example of the case where ||h|| = ||g||. Fig. 3 shows that 
as long as the ratios of ^ are not rational, a positive secure 
sum rate can be attained following our scheme. 

At last, we investigate the asymptotic behavior of the 
expression ®. We show that our scheme achieves a total 
secure DoF of Earlier, to prove the scalability of ® 

with log(P), we showed that the Psum is proportional to 
log(P), provided that the constant terms are ignored. 
Therefore, 

lim , . (12) 


P^oo i log (1-I-P) K 


can be shown that the Lebesgue measure of such rational ratios is small. 



Fig. 2: Achievable sum rate, with and without security evaluated 
for the three-user asymmetric Gaussian MAC at different SNR. 



Fig. 3: Achievable sum rate evaluated for the two-user asymmetric 

Gaussian wiretap MAC with channel gains given as in i fTTI l at 
SNR=25 dB. 

Thus, the asymptotic behavior of the proposed scheme agrees 
with the result in I®. In fact, we can further improve the 
presented scheme so that its asymptotic behavior reaches the 
optimal secure degrees of freedom given in 0. The latter is 
aimed to be presented in the extended version. 

IV. Proof of Theorem 1 

In this section, we use notions and properties related to the 
lattice coding and nested lattice structure which are discussed 
in detail in the seminal work by Erez and Zamir in Q . Due to 
the space limitation, we avoid discussing the previously known 
results in this paper and we focus on the new results. Our pro¬ 
posed scheme provides security by confusing the eavesdropper 
through aligning the codewords at the eavesdropper side such 
that it can only decode the subsets of the codewords which 
have the same sum values in . To this end, each encoded 
codeword x at transmitter i is scaled before the transmission 
by a factor of i.e., so that the eavesdropper 

receives the sum of the codewords x as its channel output, 
i.e., yE = + Consequently, user I generates 

its codewords x using power of SNR^ = so that the 
transmitted codewords x^ satisfy the power constraint in (|2]i. 

As it was mentioned earlier, to address the problem of users 
with different powers, we utilize the asymmetric compute-and- 
forward framework along with a nested lattice structure. In our 
asymmetric compute-and-forward framework, user £ generates 
a sequence of n-length lattice codewords using a pair of 
fine and coarse lattice sets as (A/f, A^). The coarse lattice A^ 
is scaled such that its second moment equals to the available 
power at user £, i.e., SNR^ = ggP. Also, we impose a nested 
structure on the users’ lattice pairs as 

Ax C Ax-i C ... C Ai C A/,x C • • • C Ay,i (13) 

In the rest of the proof, we shall assume 7r(£) = £, V £ in ®. 
If that is not the case, we can simply re-index the users indices 



















and define a nested structure as in ( fOl ) for the re-indexed users. 

User ^ constructs its codebook in three steps. The first step 
for user i is to construct its inner codebook = K fl Vi, 
where is the fundamental Voronoi region of the coarse 
lattice Af. The ratio between the coarse and the fine lattices 
is set such that Cg, consists of inner codewords tg, 

i.e., Rcomb,e = The inner codewords 

tg have a uniform distribution over Cg. 

In the second step, user ^ builds its outer codebook by 
generating B i.i.d. copies of the inner codewords tg, for some 
large enough B. Let us denote the outer codewords as tg. 
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mod Ai,ui,di,...,di 6 - 2e2 
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U=i 

.tx) - - 262 


Then we have ig = [t 
independently and uniformly distributed over Cg. It is worth 
to mention that the outer code is added only for technicality 
reasons in the proof of Lemma 2 in i) and it does not 
increase secrecy. Also, adding the outer layer to the codebook 
changes the block length of the overall codewords from n to 
N = Bxn. 

Finally, in the third step, the wiretap codebook is built. 
To this end, user i partitions the outer codewords into 
equal-size bins and randomly assigns each index wg S 
2^^^} to exactly one bin. Rates Rg are chosen 
such that they satisfy (Ull and = Ylf =2 Rcomb,i - 

log -I- 6i, for some small 6i > 0. Also, user i has 

a random dither for each block i, which is independently 
generated according to a uniform distribution over Vg. Dithers 
are public and do not increase secrecy^ 

To send a message Wg = wg, user I randomly picks a 
codeword ig from the corresponding bin and dithers it. Then, 
it scales the resulting codeword by the factor of The signal 
transmitted by user £ is 

= — ([U -I- dfl mod A^) (14) 

gi 

Note that in (fT4l i the modular operation is done block-wise, 
meaning that for i G i?} the signal transmitted at 

block i is mod A^). 

Proof of secrecy 

In this subsection, we bound the eavesdropper’s equivoca¬ 
tion rate. Without loss of generality, let us assume Rcomb.i > 
0, V £. We have 


(e) 1 

^ n(i 

= ^ ^ nRcomb.i - - 262 

(h) JL 1 / 

> ^ Rcomb.e - (1 - e)- log I ^^=1 ^ 

\ 

K 

> Vi?, 

i^2 


- ^ii(ui) - 262 


1 



<7? 


- 8{e) - 262 


- 2 “ '^(^) ~ 2^2 

5i 


r =2 


^ , ^^comb,£ 2 ^ 

2(9?) 

In the above inequalities, (a) is deduced from applying the 
packing lemma to the outer codewords (detailed proof of this 
step is provided in Appendix of IS))- (b) is true since after 
subtracting the noise from yE, the remaining random vectors 
become independent of the noise, (c) is true since Ai is the 
densest lattice among the lattices (Ai, A 2 ,..., A^), according 
to the nested structure in (fT3T i. Therefore, 


(15) 
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] ge^n - E 

L i=l 

Also, notice that 


mod Ai = 
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mod Ai. 


H 


gg-Kg = H 
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'^ge^i 

U=i 


mod Ai, ui 


where Ui = Ylf=igt^t “ Y.f=igt^t mod Ai. Inequality 
(d) is due to the reason that the codeword ti can be obtained 
from the modulo-sum mod tVi and the sequence of 

codewords t 2 ,..., (e) holds since dithers are independent 

of the codewords and conditioning reduces entropy, (f) is 
deduced from Lemma 2 in ||9l (Crypto lemma), which implies 
that for each block i G [1,B], t!j*V 'Yl!g =2 mod Ai has 
uniform distribution over the codebook Ci and is independent 

2 "^“°m 6 ,g and for 


^As the average leakage rate (w.r.t. dithers) goes to zero, there must exist 
a sequence of deterministic dithers for which the leakage rate goes to zero. 


of (s) since \Cg\ = 

i G B}, inner codewords have i.i.d. uniform 

distribution over Cg, V €. Also, Ui consists of B i.i.d. copies 
of by its definition, (h) follows from applying Lemma 1 
in Appendix to and finally, (i) is deduced by defining 
63 = (5(6) -I- -I- 262 . Thus, the condition in (|4|i is satisfied 

9i 

and the proof of secrecy is completed. 

V. Conclusion 

In this paper, we proposed a security scheme built on the 
asymmetric compute-and-forward framework, which works at 




























any finite SNR. The achievable secure sum rate presented in 
our scheme scales with log(SNR) and therefore, it signih- 
cantly outperforms the existing random coding result for the 
most SNR regimes. Our presented scheme also achieves a total 
secure DoF of This result can be furthered improved to 
achieve the optimal secure DoF which is aimed to be presented 
in our future work. 
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Appendix 

Lemma 1: Consider a set of n-dimensional lattices 
Ai,..., Ak with their fundamental Voronoi regions as 
Vi,...,Vif, respectively. Assume that all the lattices are 
scaled such that their second moments equal to SNR^ = 
g^P, y i G K}, where P > 0. Now construct random 

vectors u^, for j G AT}, as = Qa. 

where Si,... ,sk are independent n-dimensional random vec¬ 
tors uniformly distributed over Vi,..., Vk, respectively, and 
the operation QAj( ) is the nearest neighbor quantizer with 
respect to the lattice Aj. Then, for all e > 0 and sufficiently 
large n, the entropy of Uj is bounded as 

iiF(u,)<(l-e)llog(^ii|i±^U^(e) Vj(16) 

n 2 y J 

where (5(e) tends to zero as e —^ 0. 

Proof: According to Lemma 1, Uj is the output of the lattice 
quantizer Qa^, so it can only take discrete values. To bound 
the entropy of Uj, hrst we bound the range of || 
follows. Let Tcov.f denote the covering radius of Ai, i.e., the 
radius of the smallest ball containing the Voronoi region Vi- 


Also, let reff,£ denote the radius of the sphere which has 
the same volume as the volume of Vi, i.e., Vol(i3(reff,f)) = 
Vol(Vf). Now, consider K (n-dimensional) balls whose sec¬ 
ond moments per dimension equal to , cr|,..., a\ and their 
radii are given as rcov.i, Tcov, 2 , ■ • ■, rcov,K, respectively. Next, 
for each £ G AT}, consider a random vector bf with 

the uniform distribution over an n-dimensional ball B{rcov,i)- 
Recall that a ball has the smallest normalized second moment 
for a given volume Q. Therefore, we have 


gfP = -E||s^||' 
n 


> 

n 






(J?, V £ (17) 


Now, consider a random vector z^q = ZLi which 

random vectors are i.i.d. according to the distribu¬ 
tion A/'(0, (t|I) and therefore, Zeq ~ Af{0,alqT). Then, 

from dnl) we have (^1 < ELi (^) 9iP- 

Now, using Lemma 11 in Q, we conclude that 


(/.,(z,,) * ... * UM) 

>fj:f^,sMeq) (18) 

where n.c{n) goes to zero as n goes to inhnity. Notice 
that in deriving (fTSl l we also used the fact that vectors 
are independent vectors, and hence, pdf of their sum is the 
convolution of their individual pdfs. Now we can bound the 
range of || ELi follows. For any e > 0, 

/ K _ V 

Pm ^^Unal^+ne^ ) 

§ e^-"-(-)Pr(^||ze,|| ^ B (^n<+ne) ) < e. 

Inequality (a) follows from (fTSI l and non-negativity of the £i- 
norm. Also, the last inequality is deduced from the Weak Law 
of Large numbers (WLL) for sufficiently large n. Since we 
showed that || ELi belongs to the ball B{fna1gq -\- ne) 
with probability 1 — e, it only remains to find an upper bound 
on the number of non-intersecting Voronoi regions Vj which 
fit in this ball, i.e.. 



Vol{Vj) Vol{B{reS,j)) 



where inequality (a) is concluded from Lemma 6 in I?] and 
inequality (b) follows from (fTTl i. Finally, recall that for a high 
dimensional good lattices, we have log ® iTl . 

Therefore, 

ii7(u,) < (1 - e)i log + ^(9- 

Note that using WLL, the term (5(e) tends zero as n goes to 
infinity. This completes the proof. ■ 
























